admin/openfang
1
0
Fork 0
mirror of https://github.com/RightNow-AI/openfang.git synced 2026-07-30 15:01:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
295 Commits 8 Branches 100 Tags
cf38b49e4db2e839f4d84c3b8caa65aca2bf3a48
Commit Graph
295 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
RamXX cf38b49e4d Add openfang auth hash-password CLI command and startup warning 
Addresses review feedback:
- Add `openfang auth hash-password` subcommand so users can generate
  Argon2id hashes after upgrading (the command referenced in docs).
- Emit a tracing::warn at daemon startup when auth is enabled but the
  password_hash is not in Argon2id format, so users know why login fails.
 2026-03-27 13:03:52 -07:00
RamXX 8ba84ada9d Replace SHA256 password hashing with Argon2id for dashboard auth 
Dashboard passwords were hashed with plain SHA256 (no salt), vulnerable
to rainbow tables and GPU brute force. Switch to Argon2id with random
per-hash salts. Breaking change: existing SHA256 hashes in config.toml
must be regenerated with `openfang auth hash-password`.
 2026-03-27 13:03:52 -07:00
jaberjaber23 9fef6d6c91 fix: resolve 5 bugs + close 1 resolved (#875, #872, #867, #824, #833, #766) 
- #875: Install script uses robust sed parsing instead of fragile cut for version detection
- #872: Session endpoint returns full tool results (removed 2000-char truncation)
- #867: agent_send/agent_spawn get 600s timeout (was 120s), regular tools keep 120s
- #824: Doctor workspace skills count uses direct return value from load_workspace_skills
- #833: Model switching respects provider via new find_model_for_provider() lookup
- #766: Closed as resolved by combined heartbeat fixes (v0.5.3 + merged PRs)

All tests passing. Live tested with daemon.
v0.5.4 		2026-03-27 22:42:24 +03:00
Jaber JaberandGitHub f98bc330d4 Merge pull request #859 from RightNow-AI/dependabot/cargo/governor-0.10.4 
build(deps): bump governor from 0.8.1 to 0.10.4
 2026-03-27 22:04:59 +03:00
Jaber JaberandGitHub 86694dd926 Merge pull request #862 from RightNow-AI/dependabot/cargo/toml-0.9.12spec-1.1.0 
Bump toml from 0.8.2 to 0.9.12+spec-1.1.0
 2026-03-27 22:04:55 +03:00
dependabot[bot]andGitHub f8da17719e Bump governor from 0.8.1 to 0.10.4 
Bumps [governor](https://github.com/boinkor-net/governor) from 0.8.1 to 0.10.4.
- [Release notes](https://github.com/boinkor-net/governor/releases)
- [Changelog](https://github.com/boinkor-net/governor/blob/master/release.toml)
- [Commits](https://github.com/boinkor-net/governor/compare/v0.8.1...v0.10.4)

---
updated-dependencies:
- dependency-name: governor
  dependency-version: 0.10.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-27 19:02:27 +00:00
Jaber JaberandGitHub a72e6087d8 Merge pull request #665 from tianrking/main 
feat(channels): add MQTT pub/sub channel adapter
 2026-03-27 22:00:33 +03:00
Jaber JaberandGitHub 3a64e322ad Merge pull request #778 from BaseDatum/feat/rmcp-protocol 
feat: replace hand-rolled MCP transport with rmcp SDK
 2026-03-27 22:00:18 +03:00
Sky Moore 9e2853a5f8 fix: resolve CI failures after rebase on upstream/main 
- Add missing budget_config field to AppState in all 3 test files
- Fix redundant closures and unwrap_or_else in openfang-memory semantic.rs
- Fix needless_borrow in openfang-api routes.rs (toml::from_str)
- Update parse_researcher_hand test to match new max_iterations = 25
- Update tar to 0.4.45 to fix RUSTSEC-2026-0067 and RUSTSEC-2026-0068
- Apply cargo fmt fixes in ws.rs and feishu.rs
 2026-03-27 18:40:33 +00:00
Sky Moore feecb60442 fix: use specific capability-denial assertion to avoid OS error false positive on Linux CI 2026-03-27 16:47:37 +00:00
Sky Moore e53e238e81 fix: cargo fmt and update rustls-webpki to 0.103.10 (RUSTSEC-2026-0049) 2026-03-27 16:47:35 +00:00
Sky Moore 991aea85ee feat: use rmcp for mcp protocol instead of hand rolled 
Replace the custom JSON-RPC + stdio/SSE transport layer with the rmcp
SDK (crate 'rmcp').  This gives us spec-compliant Streamable-HTTP
transport, automatic Mcp-Session-Id tracking, SSE stream parsing, and
content-type negotiation out of the box while deleting ~300 lines of
hand-rolled plumbing.

Key changes:
- Add rmcp dependency with transport feature
- Replace McpTransportHandle enum with rmcp RunningService
- Replace manual JSON-RPC send_request/send_notification with rmcp client calls
- Add custom HTTP headers support for authenticated remote MCP servers
- Simplify tool discovery and invocation through rmcp's typed API
 2026-03-27 16:47:32 +00:00
w0x7ce bfbf0bb892 feat(channels): add MQTT pub/sub channel adapter 
Add generic MQTT 3.1.1/5.0 support for IoT and messaging integration:

- MqttConfig with broker_url, TLS, QoS, auth via env vars
- MqttAdapter implementing ChannelAdapter trait
- Support for text and JSON {"text": "..."} payloads
- Command messages via /command args syntax
- Auto-reconnect with exponential backoff
- Message chunking for long responses

Configuration example:
  [channels.mqtt]
  broker_url = "tcp://broker.hivemq.com:1883"
  subscribe_topic = "openfang/inbox"
  publish_topic = "openfang/outbox"
 2026-03-27 22:08:18 +08:00
Jaber JaberandGitHub b6cb4cc2d9 Merge pull request #657 from xinuxZ/feat/feishu-websocket-receive-mode 
feat(feishu): add WebSocket receive mode with protobuf framing
 2026-03-27 16:44:31 +03:00
Jaber JaberandGitHub 827481633c Merge pull request #662 from lizekai-hash/feat/langchain-code-reviewer 
feat(agents): add LangChain code review agent with A2A protocol
 2026-03-27 16:44:22 +03:00
Jaber JaberandGitHub ad780b9cb4 Merge pull request #667 from bobbiejaxn/feat/http-memory-backend 
feat: HTTP memory backend for SemanticStore
 2026-03-27 16:44:17 +03:00
Jaber JaberandGitHub 4582ed16b0 Merge pull request #659 from zamal-db/feat/vertex-ai-oauth-v2 
feat(drivers): add Vertex AI driver with OAuth authentication
 2026-03-27 16:44:09 +03:00
Jaber JaberandGitHub f56505258d Merge pull request #673 from vnz/feat/cron-run-now 
Implement "Run Now" for cron jobs
 2026-03-27 16:42:47 +03:00
Jaber JaberandGitHub ddd1536bcb Merge pull request #702 from yaroslavyaroslav/codex/tlg-chat-enhancements 
Expose Telegram slash commands via setMyCommands
 2026-03-27 16:42:42 +03:00
Jaber JaberandGitHub 9fa5234061 Merge pull request #705 from apestchanker/fix/claude-code-system-prompt 
fix(claude-code): pass system prompt via --system-prompt flag instead…
 2026-03-27 16:42:33 +03:00
Jaber JaberandGitHub e21efa61ef Merge pull request #685 from Fail-Safe/fix/researcher-hand-defaults 
fix: make heartbeat interval configurable and reduce researcher max_iterations
 2026-03-27 16:39:31 +03:00
Jaber JaberandGitHub 3f72c5d918 Merge pull request #701 from Fail-Safe/fix/agent-modal-ui 
fix: improve agent detail modal layout and fallback chain display
 2026-03-27 16:39:23 +03:00
Jaber JaberandGitHub c286b88d54 Merge pull request #703 from Fail-Safe/fix/heartbeat-startup-false-positive 
fix: reset last_active on agent restore to prevent heartbeat false-positives on startup
 2026-03-27 16:39:19 +03:00
Jaber JaberandGitHub 22c08c2325 Merge pull request #668 from lc-soft/fix-runtime-page-style 
fix runtime page stat card layout
 2026-03-27 16:39:13 +03:00
Jaber JaberandGitHub f6493e8843 Merge pull request #682 from Fail-Safe/fix/tool-filter-case-insensitive 
fix: make tool allowlist/blocklist matching case-insensitive
 2026-03-27 16:39:08 +03:00
Jaber JaberandGitHub 1d2bfff8ea Merge pull request #680 from Fail-Safe/fix/docs-search-provider-duck-duck-go 
fix(docs): correct search_provider value for DuckDuckGo
 2026-03-27 16:39:02 +03:00
Jaber JaberandGitHub b967852891 Merge pull request #690 from lc-soft/fix-list-style 
fix list style in message bubble
 2026-03-27 16:38:59 +03:00
Jaber JaberandGitHub d95d9583b0 Merge pull request #696 from Abhishek21k/fix(#660)/notion-api-token-fix 
Fix Notion MCP server env var name (NOTION_API_KEY → NOTION_TOKEN)
 2026-03-27 16:38:53 +03:00
Jaber JaberandGitHub 8c0cce3ac5 Merge pull request #737 from octo-patch/feature/add-minimax-m2.7 
feat: add MiniMax-M2.7 as new flagship model
 2026-03-27 16:25:35 +03:00
Jaber JaberandGitHub f036bd54e3 Merge pull request #710 from Reaster0/fix/fallback-default-provider-resolution 
fix(kernel): resolve "default" provider in fallback_models before driver init
 2026-03-27 16:25:30 +03:00
Jaber JaberandGitHub 77da90f3f8 Merge pull request #709 from Fail-Safe/fix/touch-agent-before-llm-call 
fix: stamp last_active before LLM call to prevent mid-iteration heartbeat timeouts
 2026-03-27 16:25:26 +03:00
Jaber JaberandGitHub b0b6f84492 Merge pull request #762 from lc-soft/fix/mobile-menu-btn-overlap 
fix: resolve page-header overlap and overflow
 2026-03-27 16:25:23 +03:00
Jaber JaberandGitHub 0da8e32a51 Merge pull request #870 from lc-soft/fix/wizard-provider-api-key-test 
Clean fix for provider reset during API key test. Reviewed and approved.
 2026-03-27 16:16:49 +03:00
Liu 7410faa96d fix(wizard): prevent provider reset to first item during API_KEY test 2026-03-27 10:57:40 +08:00
Jaber JaberandGitHub e880dfa3e7 Merge pull request #777 from ANierbeck/main 
Expose all agent templates in the web interface
 2026-03-27 05:37:24 +03:00
Jaber JaberandGitHub 7791b3f170 Merge pull request #768 from voidborne-d/fix/matrix-self-message-loop 
fix(matrix): prevent bot self-reply loop with user_id mismatch and event dedup
 2026-03-27 05:37:19 +03:00
Jaber JaberandGitHub e58039c83e Merge pull request #789 from pbranchu/fix/mcp-response-matching 
Fix MCP bridge dropping tool results when servers send notifications
 2026-03-27 05:37:15 +03:00
Jaber JaberandGitHub 9b0a7d2f61 Merge pull request #790 from pbranchu/fix/sender-identity 
Prepend sender identity to channel messages for agent context
 2026-03-27 05:37:10 +03:00
Jaber JaberandGitHub 86fe4929e9 Merge pull request #775 from pbranchu/config-heartbeat-timeout 
Expose heartbeat default_timeout_secs in config.toml
 2026-03-27 05:36:32 +03:00
Jaber JaberandGitHub 9993718d9c Merge pull request #779 from Mohl/fix/streamable-http-mcp 
fix(mcp): handle Streamable HTTP MCP responses with SSE framing
 2026-03-27 05:36:28 +03:00
Jaber JaberandGitHub 0bf2f61ab1 Merge pull request #782 from rager306/fix/safe-budget-mutation 
fix: replace unsafe Arc mutation in PUT /api/budget with RwLock
 2026-03-27 05:36:24 +03:00
Jaber JaberandGitHub 51eff0d75f Merge pull request #783 from rager306/fix/csp-nonce 
fix: replace unsafe-inline CSP with per-request nonce
 2026-03-27 05:36:21 +03:00
Jaber JaberandGitHub a30cce129e Merge pull request #788 from pbranchu/fix/gemini-empty-parts 
Fix Gemini driver crash on content entries without parts
 2026-03-27 05:35:02 +03:00
Jaber JaberandGitHub 54885d8a1c Merge pull request #765 from felix307253927/pr-main-0320 
fix: Fix the issue of duplicate tool calls with identical arguments i…
 2026-03-27 05:34:59 +03:00
Jaber JaberandGitHub 617b4f81d8 Merge pull request #764 from felix307253927/pr-main-320 
fix: The command succeeded, yet the model keeps calling it repeatedly.
 2026-03-27 05:34:55 +03:00
Jaber JaberandGitHub a0f829383c Merge pull request #776 from felix307253927/pr-main-321 
fix: Empty string IDs are overwritten, leading to inconsistencies in …
 2026-03-27 05:34:51 +03:00
Jaber JaberandGitHub 6083c24484 Merge pull request #801 from b4iterdev/main 
feat: add statically compiled native-tls to binary
 2026-03-27 05:34:48 +03:00
Jaber JaberandGitHub 1964545f35 Merge pull request #814 from szponeczek/feat/infisical-sync-hand-clean 
Adds infisical-sync hand. Declarative only, strong security posture.
 2026-03-27 04:53:23 +03:00
Jaber JaberandGitHub fc7e971d7e Merge pull request #806 from ilteoood/main 
Adds NVIDIA NIM support to CLI wizard.
 2026-03-27 04:53:20 +03:00
Jaber JaberandGitHub 86309c8e40 Merge pull request #838 from turbolego/fix_clippy_linting_errors 
Trivial lint and clippy fixes.
 2026-03-27 04:52:53 +03:00